Director, Confidentiality & Privacy Operations

Known for being a great place to work and build a career, KPMG provides audit, tax and advisory services for organizations in today’s most important industries. Our growth is driven by delivering real results for our clients. It’s also enabled by our culture, which encourages individual development, embraces an inclusive environment, rewards innovative excellence and supports our communities. With qualities like those, it’s no wonder we’re consistently ranked among the best companies to work for by Fortune Magazine, Consulting Magazine, Working Mother Magazine, Diversity Inc. and others. If you’re as passionate about your future as we are, join our team.

KPMG is currently seeking a Director, Confidentiality & Privacy Operations to join our Data Strategy and Operations organization.

Responsibilities:

• Implement and lead the firm’s first-line Privacy Operations Program, in support of the Privacy Office strategic objectives
• Develop a Privacy by Design methodology embedding requirements into business process and technology development lifecycle management.
• Provide business consultations related to the development of new technologies, business processes, and projects processing personal data
• Develop, implement, and manage the team, processes, and solutions to address day to day operations as well as for regulatory required activity, e.g., Data Subject Access Requests (DSAR), Data Mapping/Records of Processing Activities (ROPA), Transfer Impact Assessments (TIA) and Data Subject Access Requests
• Oversee development, delivery and ongoing maintenance of a holistic Confidentiality/ Privacy training, communications, and awareness program, including but not limited to regulatory required privacy training such as HIPAA/GDPR/CCPA
• Serve as the first-line Confidentiality/Privacy Leader for the firm’s internal business process organizations, establishing and maintaining relationships with representative liaisons throughout those groups

Qualifications:

• Minimum eight years of experience managing teams while working in privacy initiatives and operational processes including strong experience in leading development of training and guidance on privacy topic
• Bachelor's degree from an accredited college/university; Master's degree from an accredited college/university is preferred
• Deep knowledge of privacy regulations with an understanding of US and International Privacy Regulations along with working knowledge of CCPA, GDPR, HIPAA / HITECH, Privacy Shield, GLBA; CIPP and CISA Certification
• Demonstrated ability to proactively identify and manage risks related to the processing of personal data and develop appropriate internal controls to mitigate such risks
• Proven ability to work with variety of stakeholders at all levels and effectively interact with cross-functional departments and individuals to promote privacy initiatives
• Must be currently authorized to work in the United States without the need for Visa sponsorship now or in the future

KPMG LLP (the U.S. member firm of KPMG International) offers a comprehensive compensation and benefits package. KPMG is an affirmative action-equal opportunity employer. KPMG complies with all applicable federal, state and local laws regarding recruitment and hiring. All qualified applicants are considered for employment without regard to race, color, religion, age, sex, sexual orientation, gender identity, national origin, citizenship status, disability, protected veteran status, or any other category protected by applicable federal, state or local laws. The attached link contains further information regarding the firm's compliance with federal, state and local recruitment and hiring laws. No phone calls or agencies please.

KPMG does not currently require partners or employees to be fully vaccinated or test negative for COVID-19 in order to go to KPMG offices, client sites or KPMG events, except when mandated by federal, state or local law.  In some circumstances, clients also may require proof of vaccination or testing (e.g., to go to the client site).